mirror of
https://github.com/refraction-networking/uquic.git
synced 2025-04-04 12:47:36 +03:00
8c5e7818a0
The packet containing the SHLO is the only packet that is sent with initial encryption. If it is lost, we need to make sure that the diversification nonce is included in the PublicHeader, otherwise the client will not be able to derive the keys for the forward-secure encryption.
17 lines
834 B
Go
17 lines
834 B
Go
package handshake
|
|
|
|
import "github.com/lucas-clemente/quic-go/protocol"
|
|
|
|
// CryptoSetup is a crypto setup
|
|
type CryptoSetup interface {
|
|
HandleCryptoStream() error
|
|
Open(dst, src []byte, packetNumber protocol.PacketNumber, associatedData []byte) ([]byte, protocol.EncryptionLevel, error)
|
|
Seal(dst, src []byte, packetNumber protocol.PacketNumber, associatedData []byte) ([]byte, protocol.EncryptionLevel)
|
|
SealWith(dst, src []byte, packetNumber protocol.PacketNumber, associatedData []byte, forceEncryptionLevel protocol.EncryptionLevel) ([]byte, protocol.EncryptionLevel, error)
|
|
LockForSealing()
|
|
UnlockForSealing()
|
|
HandshakeComplete() bool
|
|
// TODO: clean up this interface
|
|
DiversificationNonce(force bool) []byte // only needed for cryptoSetupServer
|
|
SetDiversificationNonce([]byte) error // only needed for cryptoSetupClient
|
|
}
|